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93d CONGKESS 
1st Session 


H. R. 10042 


IN THE HOUSE OF REPRESENTATIVES 

September 5, 1073 

Mr. Goldwater introduced the following bill; which was referred to the Com- 
mittee on the Judiciary 


A BILL 

To provide standards of fair personal information practices. 

1 Be it enacted by the Senate and House of Representa- 

2 lives of the United States of America in Congress assembled, 

3 Section 1 . This Act may be cited as the “Code of Pair 

4 Information Practices of 1973”. 

5 FINDINGS AND DECLARATION OP PURPOSE 

6 Sec. 2. (a) The Congress finds — 

7 ( 1 ) that an individual’s personal privacy is directly 

8 affected by the kind of disclosure and use made of iden- 

9 tillable information about him in a record; 

10 (2) that a record containing information about an 

11 individual in identifiable form must be governed by 

I . * ; 
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1 procedures that afford the individual a right to partici- 

2 pate in deciding what the content of the record will be, 

3 and what disclosure and use will be made of the identi- 

4 fiable information in it; 

5 (3) that any recording, disclosure, and use of iden- 

G tifiable personal information by an organization not 

7 governed by such procedures must be proscribed as an 

8 unfair information practice unless such recording, dis- 

9 closure, or use is specifically authorized by Federal 

10 statute. 

11 (b) The purpose of this Act is to insure safeguards for 

12 personal privacy from recordkeeping organizations by ad- 

13 herence to the following principles of information practice: 

14 (1) There must be no personal data recordkeeping 

15 systems whose very existence is secret. 

16 (2) There must be a way for an individual to find 

17 out what information about him is in a record and how it 

18 is used. 

19 (3) There must be a way for an individual to pre- 

20 vent information about him obtained for one purpose 

21 from being used or made available for other purposes 

22 without his consent. 

23 (4) There must be a way for an individual to cor- 

24 rect or amend a record of identifiable information about 

25 him. 
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1 (5) Any organization creating, maintaining, using, 

3 or disseminating records of identifiable personal data 

3 must assure the reliability of the data for their intended 

4 use and must take reasonable precautions to prevent 

5 misuse of the data. 


6 

7 

8 


9 


10 

11 

12 

13 

14 

15 


(6) Deviations from those principles should be 
permitted only if it is clear that some significant interest 
of the individual data subject will be served or if some 
paramount societal interest can be clearly demonstrated. 
No deviation should be permitted except as specifically 
provided by statute. 

DEFINITION'S 

Sec. 3. For the purposes of this Act — 

(a) The term “automated personal data system” means 
a collection of records containing personal data that can be 


lb associated with identifiable individuals, and that are stored, 

17 in whole or in part, in computer-accessible files. 

18 (b) The term “data that can be associated with iden- 

19 tillable individuals” means that by some specific identifica- 


20 tion, such as a name or social security number, or because 

21 they include personal characteristics, it is possible to identify 

22 an individual with reasonable certainty. 

23 (c) The term “personal data” includes all data that de- 

24 scribes anything about an individual, such as identifying 

25 characteristics, measurements, test scores; that evidence 
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1 things done by or to an individual such as records of financial 

2 transactions, medical treatment, or other services; or that 
2 afford a clear basis for inferring personal characteristics oi 

4 things done by or to an individual, such as the mere record 
r- of lfis presence in a place, attendance at a meeting, or ad- 
(’ mission to some type of service institution. 

7 (d) The term “computer accessible” means recorded on 

8 magnetic tape, magnetic disk, magnetic drum, punched card, 

9 or optically scannable paper or film. 

10 (c) The term “data system” includes all processing op- 

u erations, from initial collection of data through all uses of 
12 the data, including outputs from the system. Data recorded on 

43 questionnaires, or stored in microfilm archives, are consid- 

44 ered part of a data system, even when the computer-accessi- 

15 ble files themselves do not contain identifying information. 

16 (f) The term “organization” means any Federal agen- 

17 cy; the courts of the United States; the government of the 
-j 8 District of Columbia; any public or private corporation, part- 
49 nership, agency, or association which operates an adminis- 
20 trative automated personal data system, or a statistical- 
24 reporting and research automated personal data system; and 

22 which is supported in whole or in part by Federal funds, 

23 Federal systems, or federally supported systems, or which 

24 directly or indirectly makes use of any means or instruments 

05 of transportation or communications in interstate commerce, 
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1 or of the mails, or which carries or causes to be carried in the 

2 mails or interstate commerce, or by any other means or in- 

3 struments of transportation any personal data; and any orga- 

4 nization which maintains a record of individually identifiable 

5 personal data which it does not maintain as part of an admin- 

6 istrative or as a statistical-reporting and research automated 

7 personal data system and which transfers such data to one of 

8 the above organizations in interstate commerce. 

9 (g) The term “administrative personal data system” 

10 means one that maintains data on individuals for the purpose 

11 of affecting them directly as individuals; and for making 

12 determinations relating to their qualifications, character, 

13 rights, opportunities, or benefits. 

H (h) The term “statistical-reporting or research system” 

11 means one that maintains data about individuals exclusively 
11 for statistical reporting or research and is not intended to be 
1^ used to affect any individual directly. 

18 (i) The term “unfair personal information practice” 

1 9 means a failure to comply with any safeguard requirements 
29 of this Act. 

2 1 (j) The term “data subject” means the individual whose 

22 name or identity is added to or maintained on an automated 
22 personal data system or a statistical-reporting or research 
21 system. 
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1 SAFEGUARD REQUIREMENTS FOR ADMINISTRATIVE 

2 PERSONAL DATA SYSTEMS 

3 Seo. 4. (a) General Requirements — ( 1 ) Any or- 

4 ganization maintaining a record of individually identifiable 

5 personal data, wbich it does not maintain as part of an ad- 

6 ministrative automated personal data system, shall make no 

7 transfer of any such data to another organization, without 

8 the prior informed consent of the individual to whom the 

9 data pertain, if, as a consequence of the transfer, such data 

10 will become part of an administrative automated personal 

11 data system that is not subject to these safeguard require- 

12 ments. 

13 (2) Any organization maintaining an administrative 

14 automated personal data system shall — 

15 (A) identify one person immediately responsible for 

16 the. system, and make any other organizational arrange- 

17 ments that are necessary to assure continuing attention 

18 to the fulfillment of these safeguard requirements; 

19 (B) take affirmative action to inform each of its 

20 employees having any responsibility or function in the 

21 design, development, operation, or maintenance of the 

22 system, or the use of any data contained thciein, about 

23 all these safeguard requirements and all the rules and 

24 procedures of the organization designed to assure com- 
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pliance with them, and the nature of such action shall 
he supplied upon the reasonable request of a data subject ; 

(C) specify penalties to be applied to any employee 
who initiates or otherwise contributes to any disciplinary 
or other punitive action against any individual who brings 
to the attention of appropriate authorities, the press, or 
any member of the public, evidence of unfair personal 
information practice ; 

P) take reasonable precautions to protect data in 
the system from any anticipated threats or hazards to 
the security of the system ; 

(E) make no transfer of individually identifiable 
personal data to another system without (i) specifying 
requirements for security of the data, including limita- 
tions on access thereto, and (ii) determining that the 
conditions of the transfer provide substantial assurance 
that those requirements and limitations will be ob- 
served — except in instances when an individual specifi- 
cally requests that data about liim be transferred to an- 
other system or organization; 

(E) maintain a complete and accurate record of 
every access to and use made of any data in the system, 
including the identity of all persons and organizations to 
which access has been given ; 
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1 (G) maintain data in the system with which such 

2 accuracy, completeness, timeliness, and pertinence as is 

3 . necessary to assure accuracy and fairness in any deter- 

4 mination relating to an individual’s qualifications, char- 

5 acter, rights, opportunities, or benefits, that may he 

6 made on the basis of such data. 

7 (b) Any organization maintaining an administrative 

8 automated personal data system that publicly disseminates 

9 statistical reports or research findings based on personal data 

10 drawn from the system, or from systems of other organiza- 

11 tions, shall — 

12 (1) make such data publicly available for inde- 

13 pendent analysis, on reasonable terms ; and 

14 (2) take reasonable precautions to assure that no 

15 data made available for independent analysis will be 

16 used in a way that might reasonably be expected to 

17 prejudice judgments about any individual data subject’s 

18 character, qualifications, rights, opportunities, or bene- 

19 fits. 

20 (c) Public Notice Requirement. — Any organization 

21 maintaining an administrative automated personal data sys- 

22 tern shall give public notice of the existence and character 

23 of its system once each year, in the case of F ederal organiza- 

24 tions in the Federal Register, or in the case of other organiza- 

25 tions, in a media likely to bring attention to the evidence of 
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1 the records to the data subject. Any organization maintain- 

2 mg more than one system shall publish such annual notices 

3 for all its systems simultaneously. Any organization propos- 

4 ing to establish a new system, or to enlarge an existing sys- 

5 tern, shall give public notice long enough in advance of the 

6 initiation or enlargement of the system to assure individuals 

7 who may be affected by its operation a reasonable opportu- 

8 nity to comment. The public notice shall specify : 

(1) The name of the system. 

(2) The nature and purpose (s) of the system. 

(8) The categories and number of persons on whom 

data are (tobe) maintained. 

(4) The categories of data (to be) maintained, in- 
dicating which categories are (to be) stored in computer- 
accessible files. 

(5) The organization’s policies and practices re- 
garding data storage, duration of retention of data, and 
disposal thereof. 

(6) The categories of data sources. 


9 
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(7) A description of all types of use (to be) made 
of data, indicating those involving computer-accessible 
files, and including all classes of users and the organiza- 
tional relationships among them. 


(8) The procedures whereby an individual can (A) 
be informed if he is the subject of data in the systems; 
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(B) gain access to such data; and (C) contest their 
accuracy, completeness, timeliness, pertinence, and the 
necessity for retaining it. 

(9) The procedures whereby an individual, group, 
or organization can gain access to data used for statisti- 
cal reporting or research in order to subject such data 
to independent analysis. 

(10) The title, name, and address of the person 
immediately responsible for the system. 

(11) A description of the penalties to be applied 
to any employee who initiates or otherwise contributes to 
any disciplinary or other punitive action against any indi- 
vidual who brings attention to any evidence of unfair 
information practices. 

(d) Eights of Individual Data Subjects.— Any 
organization maintaining an administrative automated per- 
sonal data system shall— 

(1) inform an individual asked to supply personal 
data for the system whether he is legally required, or 
may refuse, to supply the data requested, and also of 
any specific consequences for him, which are known to 
the organization, of providing or not providing such 
data; 

(2) upon request and proper identification of any 


Approved For Release 2002/05/01 : CIA-RDP82-00357R0007001 2001 5-0 



Approved For,Release 2002/05/01 : CIA-RDP82-00357R0007001 2001 5-0 


1 

2 


4 


5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 


17 

18 


19 


20 


21 


22 


23 


11 

data subject, clearly and accurately disclose to the data 
subject, in a form comprehensible to him — 

(A) all data, about the data subject; 

(B) the source's of the information; 

(C) the recipients of any transfer, report, dis- 
semination, or use of data about the data subject, 
including the identity of all persons and organiza- 
tions involved and their relationship to the system; 
(3) comply with 1 he following minimum conditions 

of disclosure to data subjects — 

(A) an organization shall make the disclosures 
required under subsection 4(d) (2) during normal 
business hours; 

(B) the disclosures required under section 4 
(d) (2) shall be, made to the data subject (i) in 
person if he appears in person and furnishes proper 
identification; the data subject is entitled to personal, 
visual inspection of data about him; or (ii) by tele- 
phone if he has made a written request, with proper 
identification; telephone disclosures are to be made 
without charge to the data subject ; and (iii) by mail 
if he has made a written request, with proper identi- 
fication; and (iv) by providing a copy of his file, if 
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requested, at a charge not to exceed 10 cents per 
page; 

(0) the data subject shall be permitted to be 
accompanied by one person of his choosing, who 
shall furnish reasonable identification. An organiza- 
tion may require the data subject to furnish a writ- 
ten statement granting permission to the organiza- 
tion to discuss the data subject’s file in such per- 
son’s presence; 

(D) subsection 4(d) (2) disclosure, shall not 
apply to subject files that are (i) directly related 
to international relations or international subversive 
activities, or (ii) active criminal investigatory data, 
except active criminal investigatory data which has 
been maintained for a period longer than reasonably 
necessary to bring indictment, information, or to 
commence prosecution. 

(4) assure that no use of individually identifiable 
data is made that is not within the stated purposes of 
the system as reasonably understood by the individual, 
unless, in the case of each use of such data, the informed 
consent of the individual has been obtained in writing; 

(5) assure that no data about an individual is made 
available from the system in response to a demand for 
data made by means of compulsory legal process, unless 
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the individual to whom the data pertain has been noti- 
fied of the demand ; and 

(6) if the completeness, accuracy, pertinence, time- 
liness, or necessity for retaining the data in the system is 
disputed by the data subject and the dispute is directly 
conveyed to the organization by the data subject, the 
following minimum procedures shall be followed: 

(A) The organization shall within a reasonable 
period of time investigate and record the current 
status of that data unless it has reasonable grounds 
to believe that the dispute by the data subject is 
frivolous or irrelevant. 

(B) If, after such investigation, such data is 
found to be inaccurate or can no longer be verified, 
the organization shall promptly delete such data. 

(C) The presence of contradictory informa- 
tion in the data subject’s file does not in and pf 
itself constitute reasonable grounds for believing the 
dispute is frivolous or irrelevant. 

(D) If the investigation does not resolve the 
dispute, the data subject may file a brief statement 
setting forth the nature of the dispute; the orga- 
nization may limit such statements to not more than 
one hundred words if the organization provides the 
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data subject with assistance in writing a clear sum- 
mary of the dispute. 

(E) Whenever a statement of a dispute is filed, 
unless there are reasonable grounds to believe that 
it is frivolous or irrelevant, the organization shall, in 
any subsequent transfer, report, or dissemination of 
the data in question, clearly note that it is disputed 
by the data subject and provide either the data sub- 
ject’s statement or a clear and accurate summary 
thereof. 

(F) Following any deletion of data which is 
found to be inaccurate or whose accuracy can no 
longer be verified or any notation as to disputed 
data, the organization shall, at the request of the 
data subject, furnish notification that the item has 
been deleted, or a statement, or summary, which 
contains the deleted or disputed information to any 
person specifically designated by the data subject. 

(i) The organization shall clearly and 
conspicuously disclose to the data subject his 
rights to make such a request. 

SAFEGUARD REQUIREMENTS FOR STATISTICAL-REPORTING 
AND RESEARCH SYSTEMS 

Sec. 5. (a) General Eeqttteements.— ( 1 ) Any or- 


25 ganization maintaining a record of personal data, which it 
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1 system used exclusively for statistical-reporting or research . 

2 shall make no transfer of any such data to another organiza- 

3 tion without prior informed consent of the individual to whom 

4 the data pertain, if, as a consequence of the transfer, such 

5 data will become part of an automated personal data system 

6 that is not subject to these safeguard requirements or the 

7 safeguard requirements for administrative personal data 

8 systems. 

9 (2) Any organization maintaining an automated per- 

10 sonal data system used exclusively for statistical-reporting 

11 or research shall — 

12 (A) identify one person immediately responsible 

13 for the system, and make any other organizational ar- 
id rangements that are necessary to assure continuing al- 

15 tcntion to the fulfillment of the safeguard requirements; 

16 (B) take affirmative action to inform each of its 

17 employees having any responsibility or function in the 

18 design, development, operation, or maintenance of the 

19 system, or the use of any data contained therein, about 

20 all the safeguard requirements and all the rules and pro- 

21 cedures of the organization designed to assure compliance 

22 with them ; 

23 (O) specify penalties to be applied to any employee 

24 who initiates or otherwise contributes to any disciplinary 

25 or other punitive action against any individual who 
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1 brings to the attention of appropriate authorities, the 

2 press, or any member of the public, evidence of unfair 

3 personal information practice; 

4 (D) take reasonable precautions to protect data 

5 in the system from any anticipated threats or hazards 

6 to the security of the system ; 

7 (E) make no transfer of individually identifiable 

8 personal data to another system without (i) specifying 

9 requirements for security of the data, including limita- 

10 tions on access thereto, and (ii) determining that the 

11 conditions of the transfer provide substantial assurance 

12 that those requirements and limitations will be ob- 

13 served — except in instances when each of the individu- 

14 als about whom data is to be transferred has given his 

15 prior informed consent to the transfer; and 

16 (F) have the capacity to make fully documented 

17 data readily available for independent analysis. 

18 (b) Public Notice Kequibement— A ny organiza- 

19 tion maintaining an automated personal data system used 

20 exclusively for statistical-reporting or research shall give 

21 public notice of the existence and character of its system 

22 once each year, in the case of Federal organizations in the 

23 Federal Eegister, or in the case of other organizations, in 

24 a media likely to bring attention to the existence of the rec- 

25 ords to the data, subject. Any organization maintaining more 
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than one such system shall publish annual notices for all its 
systems simultaneously. Any organization proposing to es- 
tablish a new system, or to enlarge an existing system, shall 
give public notice long enough in advance of the initiation 
or enlargement of the system to assure individuals who may 
be affected by its operation a reasonable opportunity to 
comment. The public notice shall specify — 

( 1 ) the name of the system ; 

(2) the nature and purpose (s) of the system; 

(3) the categories and number of persons on whom 
data are (to be) maintained; 

(4) the categories of data (to be) maintained, indi- 
cating which categories are (to be) stored in computer- 
accessible files; 

(5) the organization’s policies and practices regard- 
ing data storage, duration of retention of data, and dis- 
posal thereof; 

(6) the categories of data sources; 

(7) a description of all types of use (to be) made 

of data, indicating those involving computer-accessible 
files, and induding all classes of users and the organiza- 
tional relationships among them; ; 

(8) the procedures whereby an individual, group, 
or organization can gain access to data for independent 
analysis ; 
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1 (9) the title, name, and address of the person im- 

2 mediately responsible for the system ; 

3 (10) a statement of the system’s provisions for data 

4 confidentiality and the legal basis for them. 

5 (c) Eights of Individual Data Subjects —Any 

6 organization maintaining an automated personal data system 

7 used exclusively for statistical-reporting or research shall — 

8 (1) inform an individual asked to supply personal 

9 data for the system whether ho is legally required, or 

10 may refuse, to supply the data requested, and also of any 

11 specific consequences for him, which are known to the 

12 organization, of providing or not providing such data; 

13 (2) assure that no use of individually identifiable 

14 data is made that is not within the stated purpose's of 

15 the system as reasonably understood by the individual, 

10 unless, in the case of each use of such data, the informed 

17 consent of the individual has been explicitly obtained; 

qg (3) assure that no data about an individual and 

19 made available from the system in response to a demand 

20 for data made by means of compulsory legal process, 

21 unless the individual to whom the data pertain — 

22 (A) has been notified of the demand, and 

23 (B) has been afforded full access to the data 

21; before they are made available in response to the 

25 demand. 
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1 enforcement 

2 Sec. 6. (a) Injunctions foe Compliance.— W hen- 

3 ever it appears to the Attorney General of the United States 

4 that any organization has engaged, is engaged, or is about 

5 to engage in any acts or practices constituting an unfair per- 

6 sonal information practice under this Code, he may by his 

7 own discretion bring an action, in the district court of the 

8 United States or the appropriate United States court of any 

9 territory or other place subject to the jurisdiction of the 

10 United States, to enjoin such acts or practices, and showing 

11 there is or is about to be such engagement, a permanent or 

12 temporary injunction or restraining order shall be granted 

13 without bond. Upon application of the Attorney General 

14 any such court may also issue injunctions commanding any 

15 organization to comply with any section of the Code. The 

16 court may grant as relief, as it deems appropriate, any per- 

17 manent, or, temporary injunction, temporary restraining order, 

18 or other order, at the prayer of a data subject or class of data 

19 subjects. 

20 (b) Civil Liability for Unfair Personal Infoe- 

21 mation Practice, — Any organization which commits an 

22 unfair personal information practice shall he liable in an 

23 amount equal to the sum of — 

24 ( 1 ) any actual damages sustained by the data sub- 
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1 ject (s) as a result of the unfair practice, but not less 

2 than liquidated damages of $10,000 ; and 

3 (2) such amount of punitive damages as the court 

4 may allow ; and 

5 (3) in the case of any successful action to enforce 

(i any liability under this section, the costs of the action 

7 together with reasonable attorney’s fees as determined 

8 by the court. 

9 (c) Criminal Liability foe Unfair Personal In- 

10 FORMATION PRACTICES BY FEDERAL OFFICERS OF EM- 

11 ployees. — Any officer or employee of any Federal agency, 

12 the courts of the United States, the governments of the terri- 

13 tories or possessions of the United States, or the government 
u of the District of Columbia who willingly or knowingly per- 
1 5 niits or causes to occur an unfair personal information prac- 
Uj tice shall be fined not more than $10,000 or imprisoned not 

17 more than one year or, suspended from employment without 

18 P a y f° r 110 1 more than one year, or all three. 

(d) Jurisdiction of Courts; Limitations of Ac- 
20 tions. — An action to enforce any liability created under this 
t>1 Code may be brought in any appropriate United States dis- 
oo trict court without regard to the amount in controversy, or 

i-hLi 

9 3 in any other court or competent jurisdiction, within two 

9 4 years from the, date on which the liability arises, except 

95 where a defendant has materially and willfully failed to com- 
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1 ply with the safeguards under this Code, the action may be 

2 brought at any time within two years after discovery by the 

3 individual data subject. 

4 SEVERABILITY 

5 Sec. 7. If any provision of this Code or the appli- 

6 cation thereof to any particular circumstance or situation is 

7 held invalid, the remainder of this Code, or ithe application 

8 of such provision to any other circumstance or situation shall 

9 not be affected thereby. 

10 EFFECTIVE DATE 

11 Sec. 8. This Code shall take effect one year after 

12 the date of its enactment. 

13 ■ STATE LAWS 

14 Sec. 9. (a) Ho State law in effect on the date of 

15 passage of this Act or which may become effective there- 

16 after shall be superseded by any provision of this Code except 

17 insofar as such State law is in conflict with this Code. 

18 (b) The provisions of any State law or regulation in 

19 effect upon the effective date of this Act, or which may be- 

20 come effective thereafter, which provide for more stringent 

21 safeguard standards than do the provisions of this Code shall 

22 not thereby be construed or held to be in conflict with this 

23 Code. The provisions of any State law or regulation in effect 

24 upon the operative date of this Act, or which become effec- 

25 five thereafter, which provide for safeguard standards for 
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1 which no provision is contained in this Code shall not be 

2 held to he in conflict with this Code. 

3 FEDERAL AGENCY REGULATIONS 

4 Sec. 10. (a) Each Federal agency shall, with the 

5 advice of the Attorney General of the United States pursuant 

6 to the Administrative Procedure Act, promulgate, adopt, and 

7 from time to time amend and administer comprehensive rules 

8 and regulations necessary to further the purposes of this Act 

9 for the internal activities of such agency and in a manner 

10 consistent with the safeguards specified herein. 

11 ( b ) Notwithstanding any statute or regulation to the 

12 contrary, rules and regulations issued hereunder shall govern 

13 and control the collection, security, and dissemination of all 

14 automated personal data by each Federal agency. 
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